To steal today's computerized cars, thieves go high-tech
These days, cars are computer centers on wheels. Today's vehicles can contain over 100 computers and millions of lines of software code. These computers are all networked together and can operate all aspects of your vehicle.
It's not surprising, then, that car theft has also become high-tech.
The computers in a vehicle can be divided into four categories. Many computers are dedicated to operating the vehicle's drive train, including controlling the fuel, battery or both, monitoring emissions and operating cruise control.
The second category is dedicated to providing safety. These computers collect data from the vehicle and the outside environment and provide functions like lane correction, automatic braking and backup monitoring.
The third category is infotainment systems that provide music and video and can interface with your personal devices through Bluetooth wireless communications. Many vehicles can also connect to cellular services and provide Wi-Fi connectivity. The final category is the navigation system, including the car's GPS system.
Computers in one category often need to communicate with computers in another category. For example, the safety system must be able to control the drive train and the infotainment systems.
One difference between the network in your car and a typical computer network is that all devices in the car trust each other. Therefore, if an attacker can access one computer, they can easily access other computers in the car.
As with any new technology, some aspects of today's cars make it harder for thieves, and some make it easier. There are several methods of stealing a car that are enabled by today's technology.
One of the high-tech features is the use of keyless entry and remote start. Keyless entry has become common on many vehicles and is very convenient. The fob you have is paired to your car using a code that both your car and fob know, which prevents you from starting other cars. The difference between keyless entry and the remotes that unlock your car is that keyless entry fobs are always transmitting, so when you get near your car and touch the door, it will unlock. You had to press a button for old fobs to unlock the car door and then use your key to start the car.
The first keyless fobs transmitted a digital code to the car, and it would unlock. Thieves quickly realized they could eavesdrop on the radio signal and make a recording. They could then 'replay' the recording and unlock the car. To help with security, the newest fobs use a one-time code to open the door.
One method of stealing cars involves using two devices to build an electronic bridge between your fob and your car. One person goes near the car and uses a device to trick the car into sending a digital code used to verify the owner's fob. The thief's device sends that signal to an accomplice standing near the owner's home, which transmits a copy of the car's signal. When the owner's fob replies, the device near the house sends the fob signal to the device near the car, and the car opens. The thieves can then drive off, but once they turn the car off they cannot restart it. Carmakers are looking to fix this by ensuring the fob is in the car for it to be driven.
The network used by all computers in a car to communicate is called a controller area network bus. It's designed to allow the computers in a car to send commands and information to each other. The CAN bus was not designed for security, because all of the devices are assumed to be self-contained. But that presumption leaves the CAN bus vulnerable to hackers.
Car thieves often try to hack into the CAN bus and from there the computers that control the car's engine. The engine control unit stores a copy of the wireless key code, and thieves can clone this to a blank key fob to use to start the victim's car. One method is accessing a car's onboard diagnostics through a physical port or wireless connection meant for repair technicians. Thieves who access the onboard diagnostics gain access to the CAN bus.
Another network hacking method is breaking through a headlight to reach the CAN bus via a direct wiring connection.
Modern thieves also try the USB hack, which exploits a design flaw in Hyundai and Kia vehicles. This is more of an old-style hot-wiring of a car than a high-tech computer issue. It is named the USB hack because when thieves break into a car, they look for a slot in the steering column. It turns out that a USB connector fits into the slot, and this allows you to turn on the ignition.
So all someone has to do is break the window, insert a USB connector and start the car. This technique has become infamous thanks to a loose affiliation of young car thieves in Milwaukee dubbed the Kia Boyz who have gained notoriety on TikTok.
Hyundai and Kia have issued an update that closes the vulnerability by requiring the fob to be in the car before you can start it.
Given there are so many different car models, and their complexity is increasing, there are likely to continue to be new and creative ways for thieves to steal cars.
So what can you do? Some things are the same as always: Keep your vehicle locked, and don't leave your key fob in it. What is new is keeping your vehicle's software up to date, just as you do with your phone and computer.
This article is republished from The Conversation, a nonprofit, independent news organization bringing you facts and trustworthy analysis to help you make sense of our complex world. It was written by: Doug Jacobson, Iowa State University
Read more:
How Ukraine has defended itself against cyberattacks – lessons for the US
US autoworkers may wage a historic strike against Detroit's 3 biggest automakers − with wages at EV battery plants a key roadblock to agreement
Four strategies to make your neighborhood safer
Doug Jacobson does not work for, consult, own shares in or receive funding from any company or organization that would benefit from this article, and has disclosed no relevant affiliations beyond their academic appointment.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
CNN
an hour ago
- CNN
They were marching for Israeli hostages. Then an antisemitic firebombing started
Race & ethnicity The Middle East Israel-Hamas warFacebookTweetLink Follow It started as a typical Sunday for Ed Victor. Every Sunday since September, he had stood in silent solidarity with members of the Jewish community in front of the Boulder County Historic Court House. The group had gathered to take part in 'Run for Their Lives' — a global event organized by members of the Jewish community to bring attention to the 58 hostages still in Gaza. Even when there had been hecklers, Victor and other members would focus on setting up their demonstration — signs reading 'Let them go now,' and posters bearing the faces of 58 hostages still being held in Gaza. Victor was talking to someone, looking west toward the mountains, he said, when he first felt the heat. 'Huge amount of flame,' Victor said. Then, he saw someone on fire. The quiet, peaceful march in Boulder, Colorado, quickly devolved into chaos after a man used a flamethrower and Molotov cocktails to set people at the plaza on fire in an antisemitic attack. Smoke rose as demonstrators and onlookers rushed to find anything that could hold water to pour onto the more than a half dozen people set ablaze. Clothing singed off bodies. Screams from burn victims and sirens from ambulances, police cars and firetrucks pierced the air. Victor used flags and banners meant to bring awareness to the hostages to smother flames that had consumed another marcher. At least 12 people were injured in the attack, District Attorney Michael Dougherty said Monday. Two are still hospitalized, officials said. 'I never ever, ever would've thought that this would've happen. I really can't and I'm so shocked that it did,' Victor said. Jewish leaders had been warning of the historic rise in antisemitic violence and threats since the start of the war between Israel and Hamas. Nearly two years later, US-led attempts to broker a ceasefire deal between Israel and Hamas remain unsuccessful, fighting in Gaza continues and antisemitic threats in the US have boiled over into violence. Sunday's antisemitic attack took place just weeks after two Israeli Embassy staff members in Washington DC were killed by a pro-Palestinian attacker and an arsonist targeted Josh Shapiro's home during Passover because of the Pennsylvania governor's views on the war in the Gaza, heightening fear in the Jewish community. The FBI is investigating Sunday's firebombing as 'an act of terrorism.' The 'Run for Their Lives' event had been meeting regularly since mid-October 2023. The suspect, later identified as Mohamed Sabry Soliman, had been planning the attack for nearly as long, he told federal authorities. He targeted the group after researching them online, but waited nearly a year to attack them — until his daughter graduated high school, according to an affidavit filed Sunday. Soliman, who was born in Egypt but lived in Kuwait for 17 years, arrived in the United States in August 2022 as a non-immigrant visitor, according to multiple law enforcement officials. Soliman was seeking revenge after he determined the group didn't care about Palestinian hostages, per the affidavit. He told authorities he 'wanted to kill all Zionist people.' Witnesses said the suspect showed up to the plaza looking like a gardener, officials said. He wore a utility vest over his shirt, and carried a garden sprayer. Investigators believe he stopped at nearby gas stations to fill up bottles and the sprayer before the attack, arriving in the area around 1 p.m. He threw two Molotov cocktails, and the district attorney said police later found 16 more in the area. Brian Horwitz was at a nearby cafe having brunch with family when the attack began. The 37-year-old heard the screams and ran toward the suspect. ''F*** you Zionists. You're killing my people so I kill you,'' Horwitz said he heard the man say. The attacker then singled out people in the plaza saying ''you're a killer, you're a killer,'' Horwitz said. Horwitz said the man then locked eyes with him. 'That's when he looked at me and said you're a killer,' Horwitz recalled. He ran to an elderly victim who had burns on her feet and hands. The woman told him to worry about her friend instead, he said. Her friend had severe burns to her calf, the skin barely visible. 'She was cool, calm and collected - almost as if she had been there before,' Horwitz said. Three minutes after he called emergency services, police arrived and took the suspect into custody, Horwitz said. He noted the wait felt like an eternity. 'It was easily the most horrific thing I've ever seen in my life,' Horwitz said. 'There's someone who is outraged enough to go and attack these elderly people who are doing absolutely nothing to provoke it other than walk in silence and meet in a courtyard peacefully. It's unbelievable.' Soliman 'stated he would do it (conduct an attack) again,' according to the affidavit. He later told investigators he had planned on dying in the attack, according to a warrant for his arrest. Many of the injured were older adults. None of them have died, Boulder police said. Two were burned so badly, they had to be airlifted to nearby hospitals. In one video, a severely injured woman is seen lying on the ground as bystanders pour water on her. 'There were people on the ground and a bunch of others running over with buckets and bottles and whatever they could carry water in' the owner of Heady Bauer, a local clothing store, told CNN. 'Everyone was dumping water on the burned people, especially one woman on the ground who was totally torched from her hair to her legs.' Aaron Brooks said he saw 'smoke coming from a human being.' There was also singed grass and black marks around the site of the attack, he said. Horwitz said he saw pants completely burned and singed off, and 'it looked like their skin had just melted off their bodies.' Among those injured are a mother and daughter, said Elyana Funk, executive director of the University of Boulder Hillel. The mother 'is a Holocaust survivor in her 80's, who's been through certainly enough trauma.' Funk said she talked to some of the victims, who range in age from 52 to 88, including one woman who is 'healing from horrible burns.' The woman, Funk said, 'really felt like this happened not just to her, but to the whole community.' Soliman has been arrested and charged with a federal hate crime, and is facing a slew of state charges, including 16 counts of attempted first-degree murder. The weekly vigil in Boulder is now on hold, but Funk said the community will still find ways to come together. Victor says he'll be back next week again, just like he's been for nearly a year. 'This would not stop me,' he said. 'We'll see what other people decide they want to do, but I will be here.' CNN's John Miller, Sara Smart, Sarah Dewberry, Mark Morales, Martin Goillandeau, Amanda Jackson, Isaac Yee, Amanda Musa, Karina Tsui, Josh Campbell, Hanna Park, Matt Rehbein and Holmes Lybrand contributed to this report.
CNN
an hour ago
- CNN
They were marching for Israeli hostages. Then an antisemitic firebombing started
It started as a typical Sunday for Ed Victor. Every Sunday since September, he had stood in silent solidarity with members of the Jewish community in front of the Boulder County Historic Court House. The group had gathered to take part in 'Run for Their Lives' — a global event organized by members of the Jewish community to bring attention to the 58 hostages still in Gaza. Even when there had been hecklers, Victor and other members would focus on setting up their demonstration — signs reading 'Let them go now,' and posters bearing the faces of 58 hostages still being held in Gaza. Victor was talking to someone, looking west toward the mountains, he said, when he first felt the heat. 'Huge amount of flame,' Victor said. Then, he saw someone on fire. The quiet, peaceful march in Boulder, Colorado, quickly devolved into chaos after a man used a flamethrower and Molotov cocktails to set people at the plaza on fire in an antisemitic attack. Smoke rose as demonstrators and onlookers rushed to find anything that could hold water to pour onto the more than a half dozen people set ablaze. Clothing singed off bodies. Screams from burn victims and sirens from ambulances, police cars and firetrucks pierced the air. Victor used flags and banners meant to bring awareness to the hostages to smother flames that had consumed another marcher. At least 12 people were injured in the attack, District Attorney Michael Dougherty said Monday. Two are still hospitalized, officials said. 'I never ever, ever would've thought that this would've happen. I really can't and I'm so shocked that it did,' Victor said. Jewish leaders had been warning of the historic rise in antisemitic violence and threats since the start of the war between Israel and Hamas. Nearly two years later, US-led attempts to broker a ceasefire deal between Israel and Hamas remain unsuccessful, fighting in Gaza continues and antisemitic threats in the US have boiled over into violence. Sunday's antisemitic attack took place just weeks after two Israeli Embassy staff members in Washington DC were killed by a pro-Palestinian attacker and an arsonist targeted Josh Shapiro's home during Passover because of the Pennsylvania governor's views on the war in the Gaza, heightening fear in the Jewish community. The FBI is investigating Sunday's firebombing as 'an act of terrorism.' The 'Run for Their Lives' event had been meeting regularly since mid-October 2023. The suspect, later identified as Mohamed Sabry Soliman, had been planning the attack for nearly as long, he told federal authorities. He targeted the group after researching them online, but waited nearly a year to attack them — until his daughter graduated high school, according to an affidavit filed Sunday. Soliman, who was born in Egypt but lived in Kuwait for 17 years, arrived in the United States in August 2022 as a non-immigrant visitor, according to multiple law enforcement officials. Soliman was seeking revenge after he determined the group didn't care about Palestinian hostages, per the affidavit. He told authorities he 'wanted to kill all Zionist people.' Witnesses said the suspect showed up to the plaza looking like a gardener, officials said. He wore a utility vest over his shirt, and carried a garden sprayer. Investigators believe he stopped at nearby gas stations to fill up bottles and the sprayer before the attack, arriving in the area around 1 p.m. He threw two Molotov cocktails, and the district attorney said police later found 16 more in the area. Brian Horwitz was at a nearby cafe having brunch with family when the attack began. The 37-year-old heard the screams and ran toward the suspect. ''F*** you Zionists. You're killing my people so I kill you,'' Horwitz said he heard the man say. The attacker then singled out people in the plaza saying ''you're a killer, you're a killer,'' Horwitz said. Horwitz said the man then locked eyes with him. 'That's when he looked at me and said you're a killer,' Horwitz recalled. He ran to an elderly victim who had burns on her feet and hands. The woman told him to worry about her friend instead, he said. Her friend had severe burns to her calf, the skin barely visible. 'She was cool, calm and collected - almost as if she had been there before,' Horwitz said. Three minutes after he called emergency services, police arrived and took the suspect into custody, Horwitz said. He noted the wait felt like an eternity. 'It was easily the most horrific thing I've ever seen in my life,' Horwitz said. 'There's someone who is outraged enough to go and attack these elderly people who are doing absolutely nothing to provoke it other than walk in silence and meet in a courtyard peacefully. It's unbelievable.' Soliman 'stated he would do it (conduct an attack) again,' according to the affidavit. He later told investigators he had planned on dying in the attack, according to a warrant for his arrest. Many of the injured were older adults. None of them have died, Boulder police said. Two were burned so badly, they had to be airlifted to nearby hospitals. In one video, a severely injured woman is seen lying on the ground as bystanders pour water on her. 'There were people on the ground and a bunch of others running over with buckets and bottles and whatever they could carry water in' the owner of Heady Bauer, a local clothing store, told CNN. 'Everyone was dumping water on the burned people, especially one woman on the ground who was totally torched from her hair to her legs.' Aaron Brooks said he saw 'smoke coming from a human being.' There was also singed grass and black marks around the site of the attack, he said. Horwitz said he saw pants completely burned and singed off, and 'it looked like their skin had just melted off their bodies.' Among those injured are a mother and daughter, said Elyana Funk, executive director of the University of Boulder Hillel. The mother 'is a Holocaust survivor in her 80's, who's been through certainly enough trauma.' Funk said she talked to some of the victims, who range in age from 52 to 88, including one woman who is 'healing from horrible burns.' The woman, Funk said, 'really felt like this happened not just to her, but to the whole community.' Soliman has been arrested and charged with a federal hate crime, and is facing a slew of state charges, including 16 counts of attempted first-degree murder. The weekly vigil in Boulder is now on hold, but Funk said the community will still find ways to come together. Victor says he'll be back next week again, just like he's been for nearly a year. 'This would not stop me,' he said. 'We'll see what other people decide they want to do, but I will be here.' CNN's John Miller, Sara Smart, Sarah Dewberry, Mark Morales, Martin Goillandeau, Amanda Jackson, Isaac Yee, Amanda Musa, Karina Tsui, Josh Campbell, Hanna Park, Matt Rehbein and Holmes Lybrand contributed to this report.
CNN
an hour ago
- CNN
Defense Accuses Alleged Victim 'Mia' Of 'MeToo Money Grab' - Laura Coates Live - Podcast on CNN Audio
Defense Accuses Alleged Victim 'Mia' Of 'MeToo Money Grab' Laura Coates Live 46 mins A former employee of Sean 'Diddy' Combs concluded her testimony Monday afternoon after three days on the stand at his federal criminal trial, during which she recounted multiple alleged instances of physical, emotional and sexual abuse by Combs. The employee, testifying under the pseudonym 'Mia,' was the 21st witness in the case and gave one of the lengthier testimonies thus far, second only to key witness Cassie Ventura.
